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Abstract. We give an efficient algorithm for Lang's Theorem in spUt con- 
nected reductive groups defined over finite fields of characteristic greater than 
3. This algorithm can be used to construct many important structures in finite 
groups of Lie type. We use an algorithm for computing a Chevalley basis for 
a split reductive Lie algebra, which is of independent interest. 



1. Introduction 

A finite group of Lie type can be described as tlie rational points of a connected 
reductive algebraic group over a finite field. Given a structure in the algebraic 
group, such as a conjugacy class or a maximal torus, we want to find the corre- 
sponding structures in the finite group of Lie type. This can often be achieved 
with Lang's Theorem. We provide a computationally efficient algorithm for Lang's 
Theorem in split connected reductive groups. Our algorithm is randomised but 
guaranteed to return a correct answer, ie, it is Las Vegas in the sense of Bab9j . 
Glasby and Howlett |GH97| have already solved this problem in a special case; 
our algorithm is inspired by their work and the proof of Lang's Theorem given in 

[Miiip3 . 

Throughout this paper fc is a finite field of size q and characteristic p, and 
is the unique degree r extension of k in the algebraic closure k. The affine space 
of dimension N can be identified with k^ . An affine variety A is a subset of k^ 
that consists of the zeroes of a collection of polynomials. The variety is defined 
over k if it is closed under the action of the map F : k^ — > k^ that takes the 
qth power of each component. The restriction of -F to A is called the (standard) 
Frobenius endomorphism of X. The set of rational points of A over fc^, denoted 
by X(kr), consists of those elements of A fixed by F^. A nonstandard Frobenius 
endomorphism is a morphism F' : X —> X such that {F'Y = i^" for some positive 
integer s. The elements of A fixed by F' are the rational points of a k-form of A. 
In this paper, Frobenius endomorphisms are standard unless otherwise stated. 

A linear algebraic group is an affine variety with group multiplication and in- 
version given by rational functions. See, for example, |Spr98| for more details 
including the definitions of reductive and connected groups. Every linear algebraic 
group contains a maximal connected subgroup G°, the component of the identity. 
This subgroup is normal and G/G° is finite, so for many purposes it suffices to 
study connected groups. An important result on linear algebraic groups over finite 
fields is: 
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Theorem 1.1 (Lang's Theorem). IfG is a connected linear algebraic group defined 
over the finite field k with Frobenius map F , then the map 

G G, a t-^ a^^a 

is onto. 

This is equivalent to the statement that the first Galois cohomology of G is trivial. 

In this paper, we give an algorithm for Lang's Theorem in fc-split connected 
reductive groups described by the Steinberg presentation as in CMT04 . In par- 
ticular, the root datum, and hence the Cartan type, of G is known. Reductive 
groups are likely to be the critical case, since the problem for an arbitrary con- 
nected linear algebraic group could be solved by working down a composition series 
(see Section 13) and all simple connected groups are reductive. Our main result is: 

Theorem 1.2. Let k be a finite field of characteristic greater than 3. Let G be a 
k-split connected reductive linear algebraic group. Let c be in G{kr), and suppose 
we are given s, the order of c^ ■ ■ -c^c. Then we can find a G G(krs) such that 
c = a~^a in Las Vegas time 0{n^r^s^ log^(n) log^(g)) where n is the reductive rank 
ofG. 

We can improve significantly on this result for the classical groups: 

Theorem 1.3. Let G be a k-split simple connected classical group defined over k. 
Let c be in G{kr) and suppose we are given s, the order of c^ ■ ■ -c^c. Then we 
can find a £ G{krs) such that c — a^^a in Las Vegas time 0{n^r^s^ log (g)) where 
n is the reductive rank of G. 

The parameter s measures the size of the field extension required, as explained 
in Section 12 In Section 13 we use the concept of i^-eigenvectors to reduce to a 
problem involving forms of G-modules. A solution to this problem and a proof of 
Theorem ll.3l is given in Section^ This solution uses the algorithm for computing a 
standard Chevalley basis in the Lie algebra of G described in Sectional The running 
time of this algorithm is analysed in Sectional leading to a proof of Theorem ll.2l 

2. Minimum field degree 

Computation in large finite fields is a challenging problem (see, for example, 
|LN97j \ So we start with an easy result giving the size of the field extension 
needed for Lang's Theorem. We define the minimum field degree of <? G G as the 
smallest r such that g^ — g. Note that g has minimum field degree r if, and only 
if, kr is the smallest extension of k such that g is in G{kr). 

Proposition 2.1. Let G be a connected linear algebraic group defined over k. 
Let c be an element of G with minimum field degree r and let s be the order of 
c^ ■ ■ ■ c^ c. If c ^ a^^a for some a in G, then the minimum field degree of a 
is rs. 

Proof. Let m be the minimum field degree of a. Clearly fc^ is a subfield of km-, so 
r is a divisor of m, say ru = m. Since c^ = c, we have 

Ic ■ ■ ■ c c\ ~ c ■ ■ ■ c c = a a ■ ■ ■ a a a a = a a. 

Hence —a if, and only if, u is a multiple of s. □ 
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The most important consequence of this proposition is that the minimum field 
degree is independent of the particular choice of a and can be computed beforehand. 
In all our timings we consider s, the order of • ■ -c^c, to be an input of our 

algorithm. While it is straightforward to compute s, no polynomial time algorithm 
is known. The best known method for computing s is to convert from the Steinberg 
presentation of G to a faithful representation jCMT04j and then compute the order 
of the corresponding matrix using the algorithm of jCLG97j . If the representa- 
tion has degree d, this takes Las Vegas time 0(c?^ log(g) log log(g'')) plus the time 
required to factor a collection of integers of the form q'^' — 1 with di < d. 

Suppose now that G is a fc-split reductive group with reductive rank n and 
semisimple rank £. The element c, which is the input to our algorithm, has size 
0((n + ^^)rlog(g)); while the element a, which is the output, has size 0((n + 
£^)rslog{q)). Since s need not be bounded by a polynomial in n, £, r, and \og{q), 
there is no algorithm for Lang's Theorem that is polynomial in the size of the input. 
The best we can hope for is an algorithm which is polynomial in the size of the 
output. 

3. Twisted eigenvectors 

We can now give an outline of our main algorithm. Let G — G(k^ be a connected 
linear algebraic group defined over k. Suppose that y is a G- module of dimension d 
defined over k, so that F acts onV = k'^ by taking the qth power of each component. 
We say that w € y is an F -eigenvector of c if c = v (note that the ".F-eigenvalue" 
is always one). The set E{k) of all F-eigenvectors in y is a fc-space of dimension 
d. By Lang's theorem, the fc^s-span of E{k) must be equal to V{krs)- There is a 
variety E defined over k such that E{kt) is the /cj-span of E{k) for every positive 
integer t. Such a variety is called a k-form of V Spr98| Section 11.1]. 

The following easy lemma is the key to our recursive approach. 

Lemma 3.1. Let G he a connected linear algebraic group defined over k and let 
V be a G-module defined over k with kernel K < G. Let c be an element of G. 
Suppose that E{k) is the set of F -eigenvectors of c in V. Then a ^ G satisfies 
c € a~^Ka if, and only if, V{k)a = E{k). 

Proof. If a^^ za = c for z G K, then, for all v € V{k), va = vza = va^c = {va)^c 
and so va G E{k). Conversely, if V{k)a — E{k), then, for all v € V{k), va — 
{va)^c — va^c and so a^ca^^ £ K . □ 

We call an element a £ G{krs) such that V{k)a — E{k) a transformer in G for 
the fc-form E. Our approach to solving Lang's Theorem is outlined in Algorithm^ 
Note that s is taken to be the order of c-'^ ■ • • c^c in the top-level function call. 
It is not necessary to recompute s for the recursive calls since a multiple of the 
element order works just as well. 

Suppose that G is split reductive and let Tq be a fc-split maximal torus of G. 
Using the methods of |CMT04j . we can construct a module V which is projectively 
faithful, that is, the kernel K is contained in the centre of G. We can now take 
F = To in Algorithm n since Z{G) is contained in every maximal torus of G. 
Since a split torus has an easily constructed faithful module, there is at most one 
recursive call for reductive groups. The same algorithm could, in principle, be used 
for a nonreductive connected group G: construct a simple quotient G/N, take V to 
be the G-module induced by a projectively faithful module for G/N, and take H to 
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Lang := function(G', c, s) [c £ G{kr), s a multiple of the order of • • • c^c 

construct a module V for G 
let E{k) = i^-ElGENSPACE(c, V, s) 
find a transformer a e G'(fcrs) for E' 
if V is faithful then 

return a 
else 

construct a proper connected subgroup H oi G containing the kernel of V 
let b = LANG(iJ, a^ca~^,s) 
return ba 
end if 
end function 

ALGORITHM 1. Algorithm outline for Lang's Theorem 

F-EIGENSPACE := function(c, V, s) [c € G{kr), s the order of c^"~^ • • • c^c] 

let S be the fc-matrix of F acting of krs 

let G be the fc-matrix of c acting on V{krs) — fc^s 

return the fixed point space of S®'^G 
end function 

ALGORITHM 2. Deterministic method for computing F-eigenvalues 

F-EIGENSPACE := function(c, V, s) [c £ G{kr), s the order of c^"^ ^ • • • c^c] 
repeat 

let X be a random d x d matrix over fc^s 

let a = x + a; c + X c c + • ■ • + x c • • ■ c c 
until a is invertible 
return V{k)a^^ 
end function 

ALGORITHM 3. Las Vegas method for computing F-eigenvalues 

be the preimage in G of the maximal torus in G/N. However, finding the normal 
subgroup N and constructing the quotient G/N are nontrivial problems which lie 
beyond the scope of this paper. 

Algorithms for finding transformers are discussed in the next section. We now 
give two algorithms for computing the F-eigenspace. The most straightforward 
method is given in Algorithmic] The key is to consider fc^s as a fc-space of dimension 
rs and to consider V{krs) — fc^l as a fc-space of dimension drs. The solution is then 
found by linear algebra over fc. Computing S takes time 0{r^s^ log (q)), where the 
second factor of log{q) is for computing qth powers. Finding G and the fixed space 
takes time 0{d^r'^s'^\og{q)). So the overall time is 0(ci^r^s'^ log^(g)). 

An alternative method, due to Glasby and Howlett |GH97j . is given in Algo- 
rithmic It takes time 0{d^r^s^ log (q)) to apply F to a. d x d matrix over krs, so 
computing a takes time 0(d'^r^s^ log^ (9)). Each randomly chosen x has a proba- 
bility of at least 1/4 of yielding an invertible element a. Since this probability is 
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bounded away from zero as q, r, s, and d become large, the algorithm is Las Vegas. 
Note that we have an algorithm for Lang's theorem in GL(V^) if the function returns 
a instead of V{k)a~^. 
We now have: 

Theorem 3.2. Let G be a connected linear algebraic group defined over k and 
let V be a G-module defined over k with dimension d. Let c be an element of G 
with minimum field degree r and let s be the order of ■ ■ ■ c^c. Then we can 

compute a basis for the k-space E{k) of F -eigenvectors of c in deterministic time 
0{d^r^s^\og^{q)) or Las Vegas time 0{d^r'^ s^ log {q)). 

4. Finding transformers 

Let G be a fc-split connected reductive linear algebraic group defined over fc, 
let c be in G{kr), and let s be the order of • • -c^c. Let Tq be the standard 

fc-split maximal torus of G determined by the Steinberg presentation. Let F be a 
projectively faithful G-module and compute the fc-form of i^-eigenvectors of c. In 
this section, we show how to find a transformer a £ G{krs) such that E{k)a = V{k). 
First we consider two special cases: split tori and classical groups. Then we give an 
algorithm for an arbitrary fc-split connected reductive group. The key is to consider 
fc-bases with some additional structure that ensures that G is transitive on all such 
bases (or Gad is transitive in Subsection 14.3(1 . 

4.1. Split tori and isogeny. A k-split torus T of dimension n is just the direct 
product of n copies of fc^ with the Frobenius endomorphism taking the qth power of 
each component. The standard module V is just fc" with the componentwise action. 
Suppose c = (ci, . . . , c„) G T{kr) and E is the variety of F-eigenvectors of c in V . 
Splitting T into n copies of fc^ and using Theorem 13.21 we can compute E in Las 
Vegas time 0{nr^s^ log^(q)). Now E has a basis of the form aiei, . . . , a„e„ where 
each Oi G fc^^ and is the ith standard basis vector in V. Now (ai, . . . , a„) G T{krs) 
is a transformer for E. Hence we have proved: 

Proposition 4.1. Let T be a k-split torus of dimension n. Let c be in T{kr), and 
suppose we are given s, the order of c^ ■ ■ -c^c. Then we can find an element a 
in T{krs) such that c — a^^a in Las Vegas time 0(nr^s^ log^(q)). 

Consider two connected linear algebraic groups G and El defined over k. Let l be 
a homomorphism G ^ H defined over k which is onto with finite kernel K. Such a 
map is called an isogeny. Now suppose G and H are reductive and described by a 
Steinberg presentation with unipotent, Weyl, and toral generators as in 
If there is an isogeny l : G ^ H, then both groups have the same Cartan type. 
Furthermore, we can assume (after composing with an automorphism) that t leaves 
unipotent and Weyl generators unchanged, and acts by a change of basis on the 
toral generators. We denote the standard tori generated by the toral generators of 
G (resp. H) by Tq (resp. Uq). Note that K < Z(G) < Tq. An important invariant 
of t is the exponent of the finite group K, which we denote by m. 

For g e To(fcr), we have L{g)^ = i{g^ ) — i{g), so L{g) e Uo{kr). This image 
can be computed in time 0{n^r\og{q)) by linear algebra in T^^kr). 

For h G Uo{kr), we can find g £ Tq such that L{g) = h. Then i{g^^ g) = 
h-'^^'h = 1, ie, g-'^'^g £ K. Hence {g^^^ g)"" = 1 and so £ To{kr). Using the 
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fact that To is a direct sum of copies of , such a g must be in To{krm)- This 
preimage can be computed in time 0{n^rmlog{q)) by hnear algebra in TQ{krrn)- 

Proposition 4.2. Let G and H be k-split connected reductive linear algebraic 
groups defined over k with reductive rank n. Suppose we have an isogeny i, : G ^ H 
defined over k and that m is the exponent of the kernel of l. For c in G or H , let 
s(c) denote the order of c/ ■■ -c^c, where r is the minimal field degree of c. 

(1) Lang's theorem can be solved for c G Gikr) in time Oin^r'^ s{c)^m? log^((7)) 
plus the time needed to solve it for some c' £ H{kr) with s(c') < s(c). 

(2) Lang's theorem can be solved for c £ H{kr) in time 0{n^rs{c)m^ \og{q)) 
plus the time needed to solve it for some c' G G{k„n) with s{c') < ms{c). 

Proof. If c G G{kr), then c' = t(c) can be found in time 0{n^r\og{q)). Clearly 
s(c') < s(c). Now we can find a' G Hrs(c) such that a'^^a' — c' . Let a G Grsm be a 
preimage of a' computed in time 0{n^rm\og{q)). Consider a^ca^^ G Ii{k^-s{c)m) ^ 

Toikrs{c)7n)- Now 

{a ca ) ■ ■ ■ [a ca ) [a ca )=a [c ■ ■ ■ c c)a =1, 

So by Proposition l4.1l we can find b G To(fcj,5(c)m) such that a^ca~^ — b^^b in Las 
Vegas time 0{nr^s{c)^m^log'^{q)). Now {ab)^^ab = c and Part (1) follows. 

If c G H{kr), we can find an element c' G G{krm) such that i(c') = c in time 
0{n^rm\og{q)). Since (c'^ • • • c'^ c'Y'^'^^ G if, we get s(c') < ms(c). We can now 
find a' G H{kj,s(c)m^) such that c' = Then a = i{a') can be computed in 

time 0{n^rs{c)m? \og{q)) and a~^a — c and Part (2) is proved. □ 

4.2. Classical groups. We now show how to find transformers for the classical 
groups, using the standard representations. Throughout this subsection we take 
V = k'^ and Bq to be the standard basis ei, . . . , of V{k). 

The simplest case is G = GLd[K). Let B be a fc-basis of E{k). Let a be the 
matrix whose rows are the elements of B. Then B^a = B, and so a is a transformer 
for E. 

Now suppose G = SLd(fc). Given a basis B of V, define its volume^ denoted 
vol(i?), to be the determinant of the matrix whose rows are the elements of B. 
Then Bq has volume one and G is transitive on all bases of volume one. Now 
suppose _B is a basis of E{k), the set of F-eigenvectors of c G G. Then B^ c = B, 
and so 

vol(S)^ = vol(B^) = vol(Bc-i) = vol{B) dct{c)-^ = vol(S), 

and vol(i?) G k. We can now construct a basis B' of E{k) with volume one by 
dividing the first element of B by the scalar vol(i?). So the matrix that takes Bq 
to B' is a transformer in G. 

Now suppose that q is odd and M is a nondegenerate orthogonal or symplectic 
form on V written {u,v) for u,v £ V. Further suppose that M is defined over k. 
Then the invariant group 



G — {x E GLd{k) I {ux, vx) = (u, v)} 
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is a reductive linear algebraic group defined over k. Note that G is not necessarily 
split or connected however. Define the m x m matrix 



4 — 



/o 



V 



v 



and let 5 be a fixed nonsquare in k. Then the form M has precisely one of the 
following Gram matrices Mb with respect to some basis B: 

• If M is orthogonal and d = 2£+ 1, then 



Mf 



Ad or 



.Af 



If M is orthogonal and d = 2£, then 

/ 

Mb = Ad or 

\Ae^i 

If Ai^ is symplectic, then d = 2£ and 



Ai^ 



-Af 



A normal basis for M is a basis of V such that Mb is one of these matrices. 

Given a nondegenerate symplectic or orthogonal form M on the fc-space U, 
Algorithm ^ constructs a normal basis for U. The quadratic equations involved 
always have solutions by the standard classification theory of bilinear forms over 
finite fields (see |Gro02| for more details). Each of these equations can be solved by 
standard techniques in time log^(g). Note that this construction is rational (that 
is, it does not use extensions of k) and takes time 0{d'^ fog('z) + d\og^{q)). 

If the form M is symplectic, we are done: our transformer is simply the matrix 
taking a normal basis of V{k) to a normal basis of E{k). 

If M is orthogonal, the two normal bases may have different Gram matrices, 
in which case the equation in Lang's Theorem has no solution. This is to be 
expected, since G is not connected in this case. If we take G — SO(V,M), then 
this problem can be avoided. Without loss of generality, the standard basis So 
is normal. Suppose that S is a normal basis of E{k). As with the special linear 
group, vol(_B) is in k. Also 

det(A/B) = det(SMB„B^) = Yo\{Bf det(Afso)- 

But the two choices given above for the Gram matrix have determinants in different 
cosets of fc^^, hence Mbq = Mb- It now remains to ensure that vol(_B) is one. Now 
Yo\{Bf = det(MBj/det(Mi3) = 1, so suppose vol(B) = -1. If Mb = Ad, then 
exchanging the first and last vectors in B results in a new normal basis with volume 
one. Otherwise, negating the {£ + l)st vector in B has the same effect. 
Similar methods work for quadratic forms in characteristic two. 
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NormalBasis := function(C/) 
let M be a nonzero element of U 
if dini(C/) = 1 then 

find a G /c such that = {u, u) or a^6 = {u, u) 

return u/a 
end if 

let z; be a nonzero element of u-^ \ ku 
if dim(C/) = 2 then 

if {u,u) G —S{v,v)k^'^ then [U anisotropic] 
find a,b ^ k such that {u, u)a? + (w, v)b'^ — 1 
find c € k such that ((u, u)a?' ~ {v, w)6^)c^ = —S 
return au + bv, c{au — bv) 
else \U isotropic] 

find a,b G k such that {u, u)a^ + {v, v)b'^ = 
let w be a nonzero element of {au + bv)^ 
return au + bv, w 
end if 
end if 

let w be a nonzero vector in {ku + kv)^ \ {ku + kv) 
find a,b,c € k such that {u, u)a? + (t;, + (w, w)c^ = 
let a; be a nonzero element of {au -\-bv -\- cw)^ 
return au + bv + cw, NormalBasis({u, v}^),x 
end function 

ALGORITHM 4. Finding a normal basis for a space with a bilinear form 

Now suppose we have a split simple classical group G of (reductive and semisim- 
ple) rank n. Then G is isogenous to one of the groups considered above, with 
d = 0{n). 

If G has type A„, then there is an isogeny map l : SL„(fc) G with m < 
71 + 1. By Proposition 14. 2lf^ . we can solve Lang's Theorem in G in Las Vegas time 
0{n^r^s^ log\q)). 

If G is not of type A|, then there is a series of at most 2 isogeny maps connecting 
G with one of the groups considered above. For each of these maps, m is at 
most 4. By Proposition 14.21 we can solve Lang's Theorem in Las Vegas time 
0{n'^r^s^ log'(g)). 

We have now proved Theorem 11.31 For groups of Cartan type G2 and F4, a 
similar result can probably be obtained by exploiting the structure of composition 
and Jordan algebras, respectively |S VOOj . 

4.3. Adjoint representation. Now consider an arbitrary fc-split connected reduc- 
tive linear algebraic group G, with reductive rank n and semisimple rank £. Then G 
has a root datum {X, <&, Y, $*) with respect to a fc-split maximal torus Tq. Here X 
and Y are free Z-modules of dimension n with a bilinear pairing (0,0) : X x y — > Z 
putting them in duahty. We fix dual bases ei, . . . , e„ for X and /i, . . . , /„ for Y. 
The roots $ are a finite subset of X and the coroots ^* are a finite subset of Y. 
There is a one-to-one correspondence * : $ ^ such that (a, a*) = 2 for every 
a . For more details see |CMTn4| . 
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The Lie algebra L = L{G) is a G-module defined over k. This is cahed the adjoint 
representation of G and it is projectively faithful. Now L{k) has basis elements Ca 
for a G $ and hi e L{To) for i — 1, . . . ,n with structure constants: 

(1) [/i„/i,]=0, 

(2) [ea,/li] = (a, /i) Ca, 

n 

(3) [e-a,ea] = y^(ei,Q!*)fe^, 

i=l 

ea+,3 for a + /3 e $, 
for a + /3 ^ /3 7^ -a, 



(4) [ea,e/3] 



where the integral constants Nap are defined in |Car72| . Such a basis is called a 
Chevalley basis. 

Choose simple roots ai,...,ai, and fix a linear ordering < on which is 
compatible with height, ie, ht(Q;) < ht(/3) implies that a < (3. Given a nonsimple 
positive root ^, take the positive roots a,/? such that S, — a -\- {3 and a is as small 
as possible with respect to the ordering on We call (a, {3) the extraspecial pair 
of We can choose a Chevalley basis of L so that the integers Nap are positive on 
extraspecial pairs by C_arZ2^ . We call such a basis a standard Chevalley basis. Note 
that, as with the normal bases in Subsection l4.2l the problem of finding a standard 
Chevalley basis is rational over k. 

The linear map a taking the standard Chevalley basis of L{k) to a standard 
Chevalley basis of E{k) must be an automorphism of L{krs). We now need to find 
a transformer in G. Let Gad be the adjoint group with the same Cartan type as G 
and let F be the automorphism group of the Dynkin diagram of G. For each element 
of F, fix a graph automorphism normalising Tq and the Borel subgroup determined 
by as in |Car72j . Take Z to be a complement to Z{L) n [L,L] in Z{L); by 
construction, our graph automorphisms fix Z pointwise. If the characteristic of k 
is greater than 3, then it follows from |Hog82| that 

Aut(L) = Aut(Z) X (F K Gad). 

We can compute a decomposition a — z^b with z G Aut(Z), 7 a graph auto- 
morphism, and b G Ga.d{krs) in time 0{d^rs\og{q)) using a shght modification of 
Algorithm 6 of |CMTn4j . Since L{k)zj = L{k), the element & is a transformer in 
Gad- It is easily checked on a case- by-case basis that the number of roots of G is 
0{£'^) and so the dimension of L is 0{n + £'^). Hence Lang's Theorem can be solved 
for c G Gad(fc^) in time OUn + i^fr^s^ log^iq)), once we have a standard Chevalley 
basis for E{k). 

Suppose now that G is simple, so that £ = n. Then there is an isogeny map 
G — > Gad with TO at most n+1. We can now apply Proposition 14 . 2iP|) and obtain: 

Proposition 4.3. Suppose that k has characteristic greater than 3. Let G be a k- 

split connected simple linear algebraic group and let L be the Lie algebra of G. Let 
c be an element of G{kr) and suppose we are given s, the order of c^ ■ ■ ■ c^c. Let 
E be the variety of F- eigenvectors of c in L. We can find a G G{krs) in Las Vegas 
time 0(n^r^s^ log (q)) plus the time needed to find a standard Chevalley basis of 
E{k). 
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We give an algorithm for finding a standard Chevalley basis in the next sec- 
tion. The timing of this algorithm is analysed in Section leading to a proof of 
Theorem O 

5. Computing a standard Chevalley basis 

We now give an algorithm for constructing a Chevalley basis of the Lie alge- 
bra L of a fc-split connected reductive group G. Recall that L is a p-Lie algebra 
|Jac62l Section V.7]. The first and hardest step is finding a fc-split maximal toral 
p-subalgebra. This is similar to the algorithm of jdGIR,96 ' for finding a Cartan 
subalgebra, but ensuring that the subalgebra is fc-split makes things considerably 
more complex. Once we have a split maximal toral p-subalgebra, a Chevalley basis 
can be constructed using |Car72l Section 4.2]. 

Our algorithm only works for fields of characteristic p > 3. Whenever possible we 
state results for characteristics 2 and 3, in the hope that the gaps in our argument 
for small p can be filled later. 

We assume that L is given as a structure constant algebra, but we frequently 
compute in the adjoint representation. Throughout this section n denotes the re- 
ductive rank of G, £ denotes the semisimple rank of G, and d denotes the dimension 
of the Lie algebra L. Recall that our Steinberg presentation of G determines a k- 
split maximal torus Tq. 

5.1. Toral subalgebras. A Lie algebra L over a field of characteristic p is called 
a p-Lie algebra if it is equipped with a map p : L ^ L satisfying the axioms 

(5) (x + yr 

(6) {ax)P 

(7) [xyP] 

where x,y ^ L, a ^ k, Si is defined in jJac62[ Section V.7], and and (adj/)?" are 
the usual pth powers. 

Given values of the p-map on a basis of L, we can compute the values on an 
arbitrary element using Equations © and JSJ. But Sp-i involves Lie products of 
length p, so the time taken for this computation is not polynomial in log(p). Given 
X £ L, we can use Q to compute the coset x^ + Z{L) in time 0{t^ log(g) log(p)), 
since dim(L/Z(L)) is 0{P). We also define the q-map by applying the p-map e 
times, where q = p^; values of this map modulo Z{L) can be computed in time 
OiiHog'iq)). 

We say that x e L is semisimple if it is contained in the p-subalgebra generated 
hy x^. A toral subalgebra of L is a subalgebra defined over k consisting entirely 
of semisimple elements. Note that a toral subalgebra need not be a p-subalgebra. 
However every subalgebra TJ of L is contained in a minimal p-subalgebra called 
the p- closure of in i. The p-closure of a toral subalgebra is toral, and so a 
maximal toral subalgebra is automatically a p-subalgebra. An n-dimensional toral 
p-subalgebra H is k-split if H(k) is isomorphic, as a p-Lie algebra, to the vector 
space A;" with trivial Lie product and the p-map acting componentwise. 



p-i 

^xP + yP + ^s,{x,y), 

i=l 



x{a.dyY 
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If L is the Lie algebra of a fc-split connected reductive group G, then the values 
of the p-map on a Chevalley basis are 

hi^ = hi and Cq,^ = 0, 

provided that p > 3. Clearly iJo := L{Tq) = {hi, ... , /i„) is a fc-split toral subalge- 
bra. 

We say that the Lie algebra L is k-split if it contains a maximal toral subalgebra 
which is fc-split. The following theorem collects together the properties of toral 
subalgebras which we need. 

Theorem 5.1. Let L be the p- Lie algebra of a k-split connected reductive group G. 

(1) L is k-split with split maximal toral subalgebra Hq. 

(2) The centre of L is a k-split toral subalgebra when p > 2. 

(3) Every toral subalgebra of L is abelian. 

(4) Every (k-split) maximal toral subalgebra of L is the Lie algebra of a (k-split) 
maximal torus of G (when p > 2). 

(5) The maximal toral subalgebras of L are G-conjugate. 

(6) The k-split maximal toral subalgebras of L are G{k)-conjugate when p > 2. 

Proof. In Part |^ it only remains to prove maximality, which follows from |Hum67| 
Proposition 13.2]. Part Q is given in |Hum78[ Lemma 8.1] for characteristic zero, 
but the same proof works for positive characteristic. Part Q is Corollary 13.5 of 
|Hum67l . 

We now prove Part Let {ea,hi} be a Chevalley basis with respect to Hq. 
Suppose that z G Z{L) and write 

n 

Z — ^ ^ t^hi -\- ^ ^ Qq/Cq-. 
i=l ae* 

Let ha = X]"=i(si' OL*)hi, then the coefficient of in [z, ha] is 2aa- Since [z, /iq,] — 
and p > 2, we get Oq = 0. Hence z \s ui Hq = {hi, . . . , hn). Since Hq is a split toral 
subalgebra, Z{L) is also. (The idea for this proof is from |Hog82| Lemma 6.10].) 

Every maximal toral subalgebra of L is the Lie algebra of a maximal torus of 
G by Hum67, Proposition 13.2]. For p > 2, split tori correspond to split toral 
subalgebras by |Sel671 Theorem 9]. Hence Part Q is proved. 

From now on we assume p > 2. By |iHum67i Proposition 13.6], T i— > L{T) 
gives a one-to-one correspondence between maximal tori of G and maximal toral 
subalgebras of L. Once again, split tori correspond to split toral p- algebras. Part © 
now follows from the corresponding result for tori. □ 

Corollary 5.2. Given a subalgebra H of L defined over k, we can determine if H 
is k-split maximal toral in time 0{l'^ \o^{q)). 

Proof. First check that H is abelian of dimension n, and compute H/Z. Note 
that H/Z has dimension at most t. By Theorem 15. liP|l . it suffices to determine if 
H/Z{L) is a split toral algebra. This is done by testing whether b'^-\-Z{L) = b-\-Z{L) 
where b -\- Z{L) runs over a basis of L/Z{L). As we argued at the beginning of this 
section, this takes time 0{£^ log (q)) for each basis element. □ 

Since semisimple elements are common in L{k) (see Sectional and the centraliser 
of such an element is reductive of rank n, we can find a maximal toral subalgebra 
by Algorithm 
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MaximalToralSubalgebra := function(L) 
repeat take x random in L until x is semisimple 
\etM = CL{x) 
if M is abelian then 

return M 
else 

return MAXIMALTORALSUBALGEBRA(Af) 

end if 
end function 

ALGORITHM 5 . Finding a maximal toral subalgebra in L 

The basic idea of our algorithm is to randomly select a series of increasingly 
split maximal toral subalgebras. We now assign a conjugacy class of W to every 
maximal toral subalgebra -ff , which measures how split H is. See |Leh92| for a more 
detailed version of this construction. There exists g £ G{k) such that H = Hq^ , by 
Theorem 00) • Note that Hq^ = Hq and = H, since both are defined over k. 
Now 

Ho'"'" = {{Ho'fr" = [H^y" = H''" = Ho, 
so g^g~^ is in Nc{Ho) — Ng{To). Let w be the image of g^g~^ under projection 
onto the Weyl group W — Ng{To) /To- The element w is uniquely determined by 
H up to conjugacy in W . 

5.2. Root decompositions of L. The root decomposition of L with respect to 
Ho is 

L = Ho®@L^ 

where the root space La ~ {b L \ [b, h] — a{h)b for all h G Ho} and each root 
a S $ is a linear functional Ho k defined over k. This decomposition is defined 
over k by |Sel67l Theorem 6]. If the characteristic of k is greater than 3, every root 
space has dimension one. 

Let H he a. maximal toral subalgebra of L, fix y G ^y^^ such that H — Ho' 
and let w be the image of g^g~^ in W. For a G $, define : H k hy 
a^{h) = a{h^ ). Then the root decomposition with respect to H is 

where Laa = {6 G £ | [b,h] — a^{h)b for all h G H} — La' . This decomposition is 
not defined over k in general. 

Fix a basis hi, . . . ,hn oi H and let / = (/i, . . . , /„) be a sequence of irreducible 
polynomials in k[X] with fi{X) ^ X for at least one i. Define 

Lj = {v£L\ vh{&d{hi)) = for z = 1, . . . ,£}. 

If Lf ^ 0, we call / a generalised root and i/ a generalised root space. The 
generalised root decomposition of L with respect to H is 

/6£r 
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GeneralisedRoots := function(L, H) 
let hi, . . . , hn he a basis of H 
let 3^ = {()} and define Lq = L 
for i ~ 1 , . . . , n do 

let J' = 

for / e 3^ do 

compute g, the characteristic polynomial of hi on Lf 
for fi an irreducible factor of g do 

add (/i, . . . , fi-i, fi) to y where / = (/i, . . . , 
define ...,/;) = {a; £ i/ | x/i(ad(/ii)) = 0} 
end for 
end for 
let J = 3" 
end for 

remove (X, . . . , X) from ? [since L(x x) = -^1 
return ? 
end function 

ALGORITHM 6. Generahsed roots 

where ? = 3^{L, H) is the set of generalised roots of L with respect to H . This 
decomposition is defined over k. The generalised roots are computed by Algo- 
rithm Complete factorisation of a polynomial of degree d over k takes time 
at most 0{(P{\og{d) + \og{q))log{q)), as shown in |vzGG03j . Factoring the char- 
acteristic polynomials g is the dominant contribution to the running time of this 
algorithm. Since each g has degree at most d, and the sum of the degrees of all the 
gs is at most nd, the algorithm takes time 0[nd^{\og{d) + \og{q)) \og{q)). 

In fact, we do not apply this algorithm directly to L, since we want our time 
to depend on ^ but not on n (this is necessary for analysing the recursion in Al- 
gorithm IHJ. By Theorem I5.1l(^ . the centre Z{L) is contained in H. So we can 
construct a basis /ii, . . . , /i„ for H{k) with {hi, ... , hm) = Z{L) central for some 
m <n. Extend this to a basis B of L{k). Let (j) be the pullback map L/Z{L) L 
which takes 6-1- Z to 6 for all b ^ B. Note that (/> is a linear map, but need not be a 
Lie algebra map. We compute in L/Z{L), since it has dimension 0{P) independent 
of n, and the results are then transfered into L via 0. However, LjZiV) need not 
be the Lie algebra of a group of Lie type, so most of our theoretical results do not 
apply to this quotient. 

Let 5" be the set of generalised roots of L/Z{L) with respect to H/Z{L). Given 
/ = (/i, . . . , /,„) e J define the sequence /' = (/i, . . . , /,„,X, ...,X) of lengths. It 
is now easy to see that (j){{L / Z {L)) f) = Lf. Hence the generalised root decompo- 
sition of L with respect to H follows immediately once we have the decomposition 
of L/Z{L) with respect to H/Z. Since the dimension of L/Z{L) is 0{£'^), the 
decomposition of L/Z{L) can be computed in time 0{f {\og{t) + log(g)) log(g)). 

Given a generalised root / e H), the subspace L/ is a direct sum of com- 
ponents Lag of the root decomposition with respect to H . So we can partition $ 
into subsets <&/ such that Lf = 0c<e$/ ^a"- Define the degree of / to be the lowest 
common multiple of the degrees of the fi. Given a generalised root /, we define 
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Clearly $/_ = — $/. Note that we can have / = /_ when the degree of / is greater 
than one. 

We now prove some properties of the sets $ / . 

Lemma 5.3. Let f be a generalised root of L = LiG) with respect to H. 

(1) The action of F on {Lqs | a 6 $/} is equivalent to the action of w on ^f. 

(2) <&/ is a union of orbits of w on $. 

(3) // deg(/) = 1, then w acts trivially of ^f. If in addition q > 3, then $y 
contains a single root. 

(4) //deg(/) = 2 and f ^ f-, then w acts on ^ f by negation. 

Proof. Write g^g^^ = tw for some t ^ Tq. Now 

T F T gF T F^^gF r r twg r g r 

and so Part ^ is proved. Part follows since Lf^ — Lf. 

Part ^ holds because L/ is a root space when deg(/) = 1. 

Suppose deg(/) = 2 and f = f-. Let a e Then Lqs^ = £(a^)3 and so 
{awY{hi) and a^{hi) are conjugate roots of ft. But if deg(/i) = 2, then f = f- 
implies that the conjugate roots are negatives of each other. And if deg(/i) = 1, 
then f — f- implies that the only root of fi is zero. In either case {aw)s{hi) — 
—a^{hi) and so w acts by negation. □ 

5.3. Fundamental subalgebras. Now that we have the generalised root decom- 
position of L with respect to H, we consider the subalgebra Mf generated by a 
generalised root space Lf. Such subalgebras often turn out to be fundamental: 
We define a (split) fundamental subgroup of G as a connected reductive subgroup 
normalised by a (split) maximal torus. A subalgebra M of L is (split) fundamental 
if it is the Lie algebra of a (split) fundamental group. This subgroup is denoted 
Gm- Fundamental subalgebras clearly normalise a maximal toral subalgebra. 
The most important properties of such algebras for our purposes are: 

Theorem 5.4. Suppose that k has characteristic greater than 3. Let M be a 
fundamental subalgebra of L normalised by the maximal toral subalgebra H. 

(1) M n H is a maximal toral subalgebra of M . 

(2) If H is a split maximal toral subalgebra, then M is split fundamental. 
Proof. We have H < Cm+h{II) < Cl{II) = H, so M + H has root decomposition 
(8) M + H = H®^ Mp, 

where /3 runs over $(Af + H,H), the set of roots of M + H with respect to H . 
Suppose m + h ^ Mp where m g M and h E H. Then, for all h' G H, [m, h'] = 
[m + h, h'] = a{h'){m + h). But [m, h'] £ M, and so h e M and Mp < M. By 
intersecting ((SJ with M, using the fact that each Mp has dimension one, we obtain 
the root decomposition 

M = {H nM)®^Mp, 

13 

and so iJ n M is a maximal toral subalgebra of M . 

Finally if M normalises H and H is spht, then, by Theorem 100 , H = L{T) 
for some split maximal torus T of G. Then Gm normalises T and Part ^ is 
proved. □ 
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Recall that the closure of 5* C $ is just the set of all roots that can be written 
as a sum of elements of 4'. Note that if ^ is also closed under negation, it is a 
subsystem. If 5* is a subsystem, we say w W is inner on ^E* if the action of w on 

is induced by an element oi W{'i'). 

Lemma 5.5. Suppose that k has odd characteristic. Let M be the subalgebra gen- 
erated by X^aG* Lag , where 4' is an orbit in $ under the action of w ^ W. 

(1) M is fundamental or soluble. 

(2) If M is fundamental, thenGM is semisimple. 

(3) M is fundamental if, and only if, is a subsystem. 

(4) If is a subsystem and w is inner on 5", then M is split fundamental. 

Proof. Since Eqg* -^"^ ' ^1 — X^ae^-^aS' have [M,H] < M and so M nor- 
malises H. Since [La^Lp] < La+p (recalling that Lq = H), we have 

Af =(i?nM)®0L„.,. 

Let ^I* = U • • ■ U ^I'm be the finest decomposition of 4* into pairwise orthogonal 
subsets. Then = U • ■ • U ^'m is also an orthogonal decomposition. Clearly 
w permutes the sets and, since w is transitive on it must be transitive on 
them. Since — is never orthogonal to ^^i, we either have — = or —"^i is 
disjoint from 'i'l. By the transitivity of w, whichever of these cases holds for —^1, 
also holds for all —'^i. In particular, ^ is closed under negation iff is. Let ip be 
the sum of all the elements of ^^i. Now is closed under negation iff -0 = (since 
■0 = implies —a = X]/3e*i /3#a G ^1 for all a G ^'i, and the converse is trivial). 
We define Mi — Hi © 0cte* ^a"' where Hi is the subalgebra of H generated by 
[Lqs, L.as] for all a G W^. Note that M = 0^ M,. 

Suppose first that ^ ^ Q. Then the root subsystem generated by ^1 is just 
^'i U — ^'i. Since this root subsystem is irreducible, -0 induces an ordering on it 
which makes ^'i the set of positive roots. Hence Mi is just the Borel subalgebra of 
the Lie algebra of a simple group, and so must be soluble. The transitivity of w on 
the sets '^i implies that Mi is soluble for every i, and so M = 0^ Mi is soluble. 

If "0 = 0, then 'i'l is an irreducible root subsystem and so Mi is fundamental with 
Gmi a simple group. Hence M — 0^ Mi is fundamental with Gm a semisimple 
group. Parts ^ and (0) are now proved. 

Now suppose that 5* is closed under negation and w is inner on By Lang's 
theorem in Gm, we can find h e Gm such that h^h~^ — w. On the other hand, g 
satisfies g^ — tw for some t e Tq. Now the map wF is a nonstandard Frobenius 
endomorphism since ti)^ = w and so {wF)"^ — where m is the order of ih. 
Furthermore To"" = Tq. So, by Lang's theorem in Tq, there is a w € Tq such that 
t = u'^^u-^. Set g = u'^'^g, so that 

f~g-^ = u-^^g^g-^ti"^ = ti-'^^tuw = w 

and Ho^ = jj^w-\r^wg ^ jj^g ^ ^ jj^^^g ^^f^^-i ^ gFg-\ that is gh-^ is 

defined over k and so H'^ ~ Hq^'^ is split. So 

[M,H'''''] = [M'\H]^-'' = [M,i?]''"' < A/''-"' = M 



and M is split fundamental by Theorem l5.4l(^ . 



□ 
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Components := function(i) 
let H := MaximalToralSubalgebra(L) 
let 7 = GeneralisedRoots(L, H) 

for each f G 3^ let Mf be the subalgebra generated by L/ 
construct the graph with vertices ? 

and an edge (/, g) whenever Mf D Mg is not contained in H 
let C = 

for each graph component c do 

add the subalgebra (A// | / G c) to C 
end for 
return C 
end function 

algorithm 7. Direct sum components 

An immediate apphcation is Algorithm |7| for computing the direct sum decom- 
position of a the Lie algebra L. Although more that one w-orbit of $ can have the 
same generalised root, this clearly is not possible for orbits in different components 
of <i>. The components returned are fundamental subalgebras. 

5.4. Finding a split maximal toral subalgebra. Suppose now that we have 
found a nontrivial split fundamental subalgebra M. The following proposition 
shows that we can use recursion to find a split maximal toral subalgebra of L. 

Proposition 5.6. Suppose that the characteristic of k is greater than 3. Let M be 
a split fundamental subalgebra of L. Let K be a split maximal toral subalgebra of 
M . Then Cl{K) is a split fundamental subalgebra of L with full rank n. Hence a 
split maximal toral subalgebra of Cl {K) is also a split maximal toral subalgebra of 
L. 

Proof. Let Gm be the split fundamental subgroup of G such that L{Gm) = M . 
Let T be a split maximal torus of G which normalises Gm and let H — L{T). Then 
U — Gm n T is a spHt maximal torus of Gm. By Theorem 15. we can assume 
without loss of generality that K = L{U). 

Let G = Gg{U). Clearly G is normahsed by T and it is reductive by |Hum75l 
Corollary 26. 2A], hence it is split fundamental. 

Let be the subset of <I> = <&(G', T) consisting of roots of Gm, or equivalently of 
M. Let ^' be the elements of $ which are orthogonal to all elements of ^E". Then 
^' is the root system of G and 

L{G)^H(3 L^. 

Clearly i(C) <Gl{K). 

Conversely, suppose x £ Gl{K). Let {ea,hi} be a Chevalley basis of L with 
respect to H and write 

n 

X — ^ ^ tihi ^ ^ ^a^Of 
i=l qG* 

If a ^ then there exists /3 G 4* such that (a,/?*) 7^ 0. By the basic properties 
of root data |(q;,/3*)| < 3, so {a, (3*) is still nonzero considered as an element of k. 
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SplitMaximalToralSubalgebra function(L, Z) [Z < Z{L)] 
repeat 

let H/Z = MAXIMALTORALSUBALGEBRA(i/Z) 

if H is split then return H 

let J = GeneralisedRoots(L/2', 

for each / G compute Mf = (l){{{L/Z) f)) 
until we find A C 3^ such that Ma — {J2feA ^f) < L is split fundamental 
let Ha = SplitMaximalToralSubalgebra(Ma, (/-(^(Ma/^))) 
let Ca = c^{Cl,z{Ha)) and Z = ^{Z{Ca/Z)) 
\etK = Z 

for M in Components(Ca, Z) do 

\et K = K + SplitMaximalToralSubalgebra(M, Z) 
end for 
return K 
end function 

ALGORITHM 8. Finding a split maximal toral subalgebra 

Now hfi = [e_/3, Cfj] is in K ^ and so [x, hp] ~ 0. But the coefficient of Cq, in [x, hp] 
is aa{a,P*) by (|2Jl. Hence = for all a ^ 5'' and so a; G i(C). 

The second conclusion is an immediate consequence of the first. □ 

We now have a method for finding split maximal toral subalgebras of L: Find 
a maximal toral subalgebra _ff , and compute its generalised roots. For each gener- 
alised root /, construct the subalgebra Mf generated hy Lf. Now, assuming that 
we can find A C 3^ for which Ma = {J^feA ^f) known to be split fundamental 
and strictly contained in L, find a split maximal toral subalgebra Ha of AIa- By 
Proposition 15.51 a split maximal toral subalgebra of Cl{Ha) is a split maximal 
toral subalgebra of L. Since Ma and Cl{Ha) are split fundamental subalgebras of 
L, Theorem 15. 4iP| ensures that they are also the Lie algebras of fc-split connected 
reductive algebraic groups and so this recursion is valid. Algorithm |H1 gives the 
precise method we use. Note that the second argument Z passed to this function 
is intended to indicate that we have a basis of L{k) extending a basis of Z{k), and 
the puUback map (p : L/Z ^ L. We take Z = Z(L) initially. In Section (HJ we give 
a method for ensuring that Ma is known to be split fundamental. 

5.5. Finding a Chevalley basis. We start by giving a recognition theorem for a 
standard Chevalley basis. 

Theorem 5.7. Suppose the finite field k has characteristicgreater than 3. Let G 
he a k-split connected reductive linear algebraic group defined over k and let L 
be the Lie algebra of G. Let H be a k-split maximal toral subalgebra of L and 
let L — H^^La be the root decomposition of L. Suppose we have a basis of L 
consisting of hi H for i — 1, . . . ,n and Cq, G Lq, for q G $. Further suppose this 
basis satisfies the equation 

n 

[e-a,ea] = X!^^*' '^*)'*« 

i=l 
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StandardChevalleyBasis :— function(i) 
let H = SplitMaximalToralSubalgebra(L) 
compute the root system $ and root spaces La for a G $ 
find simple roots ai, . . . ,ai for $ 
for i — !,...,£ do 
let a — ai 

choose nonzero G Lq, and fa G 
find a k such that [gq, Cq]] = 2aea 

let e_Q fa/(l^ ha — [^^ — ai^a] 

end for 

compute a basis {hi} for i?(fc) with ha = 'Y^i{ei,a*)hi for simple roots a 
for 7 a nonsimple root do 

let (a, /?) be the extraspecial pair of 7 

let = [bq, e;5]/7Vc</3, e_/3 = [e_Q, e_/3]/iV_a,_^ 
end for 
return {ca, /ij} 
end function 

algorithm 9. Finding a standard Chevalley basis 

for every simple root a and the equations 

[ea,e^] = Naf)ea+p and [e-a,e-p\ = N^a,~i3e-^a~fj 

for every extraspecial pair {a, (3). Then this is a standard Chevalley basis. 

Proof. We need to prove that this basis satisfies the defining equations given in 
Subsection l4.3l Equation |^ follow from the fact that a toral subalgebra is abelian, 
Equation is given, and the Equation Q follows from ■Car72. Theorem 4.2.1]. 
It remains to prove Equation 1^)1. 

For y ^Y, define hy — J27=i(^i'y)^i ^ H{k). It suffices to prove that 

(9) [ea,hy] = {a,y)ea, 

for some collection of elements y generating Y. 

Now (0 is true for all y G 3>* by |Car72l Theorem 4.2.1]. If {a,y) ^ for aU 
a € ^, then hy is central and so (O is trivially true. Together, these two kinds of 
element generate Y and so we are done. □ 

A consequence of this theorem is Algorithm ^ for finding a Chevalley basis of 
L. Note that for an extraspecial pair {a,/3), we have < Na/s < 3, so division 
by Naf) is not a problem. The basis {hi} can be computed by elementary linear 
algebra. Note that in the second for-loop, the roots are taken in the linear order 
< of Subsection 14.31 thus ensuring that Bq, and are already known when we 
compute Bj. 

6. Time analysis 

Let L be the Lie algebra of the fc-split connected reductive linear algebraic group 
G. We now find bounds on the probability of finding a maximal toral subalgebra 
H < L and a set A of generalised roots such that Ma is known to be split fundamen- 
tal. To simplify our analysis, we just bound the probability that AlgorithmElfinds a 
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maximal toral subalgebra in a single step, or equivalently that the random clement 
chosen is regular semisimple. Subsection 16.11 gives bounds on the frequencies of 
regular semisimple elements corresponding to Weyl group elements. In Section [6. 21 
we bound the proportion of suitable Weyl group elements. We give the proof of 
Theorem II. 21 in Section 

Throughout this section, n is the reductive rank of G, £ is the semisimple rank of 
G, d is the dimension of L, and di, . . . ,di are the invariant degrees of G as defined 
in |Uar72l Section 9.3]. 

6.1. Regular semisimple elements. An element of L is regular semisimple if 
its centraliser is a maximal toral subalgebra. For any subvariety S oi L, let Siss 
be the variety of regular semisimple elements in S. Recall from Subsection 15.11 
that the maximal toral subalgebras of L are classified up to G(fc)-conjugacy by the 
conjugacy classes of W. Fix w in W and let Lrss,i« be the set of elements x G L 
which are regular semisimple and such that there exists g € G with Cl{x) = Hq^ 
and g^ g~^ € Tqw. Although we give direct proofs, many results in this section also 
follow from Gus Lehrer's analysis of hyperplane complements |Leh92l lLeh 98' . 

The following result bounds our chances of finding a regular semisimple element 
in L{k) whose centraliser corresponds to the VF-class of a given w. 

Proposition 6.1. Let L be the Lie algebra of a k-split connected reductive group G 
with root datum {X, $, y, $*). Let w be an element of the Weyl group W . Define 



where ci — Ci{w) is the number of w-orbits in $ consisting of roots a with the 
property that i is the largest integer for which a, aw, . . . , aw'^^^ are k-linearly in- 
dependent. 



Proof. Fix some g € G such that g^ g ^ — w and define i?^, = Hq^ . Let — Tq^ 
so that L{T^)=H^. Then 



Since Na(k){H^{k))/TUk) ^ CwH. we have = |T„(lgcvl(^) | ■ Hence 



Qw{X) 




Then 




{k) ^{xe irss(fc) I X e H^{kf for some h G G(fc)}, 
which is in one-to-one correspondence with 



\L'lss,w {k) I 

\m\ 

Given a root a G $, define 



\{H^)rssik)\ 



\Lik)\\TUk)\ \W\ ■ 



\G{k)\ \w^\ 



H, 



a 



{h^H^ \a3{h)=Q}. 



Then is a hyperplane in Hyj and (-ff^)rss = - 
so Ha{k) = if].; Hawi ) (k) . This space has cod: 



imension i, the largest integer such 
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that a, aw, . . . , aw'' ^ are linearly independent. So, for each i = !,...,£, we are 
removing a subspaces of codimension i from a /c-space of dimension n. Hence 

Using Theorem 9.4.10 of jCar72| and the fact that our group is untwisted, we 
get 

iG(fc)i=<z^n(i-^). 

Using Proposition 3.3.5 of jCar93| and the fact that F is the standard Frobenius, 
we find that T„, (fc) has order defy {ql — w) . Hence 

iG(fc)i _ g"n.(i-v/') _ Q^o(Vg) 

|L(fc)||T^(fc)| q'^detriql-w) g" 

□ 

The following useful lemma can be proved by elementary calculus. 

Lemma 6.2. Let ai, . . . , am be a sequence of nonnegative integers and suppose that 
no integer appears more than a times in this sequence. Then 

6.2. Reflection derangements. Recall from Subsection 15 . 21 that there is a rela- 
tionship between between the generalised roots / with respect to a toral subalgebra 
and the orbits of the corresponding Weyl group element w on $. This relationship 
need not be a one-to-one correspondence. As we saw in Lemma l5.3ir^ and Q), 
this relationship is almost a one-to-one correspondence when the degree of / is one, 
or the degree is two and f — f-. This happens when there is a root a such that 
aw — ±Q!. In other words, when a reflection Sq is fixed under conjugation by w. 

In this section, we count the number of Weyl group elements of this kind. Given a 
permutation representation of a group, an element of the group is called a derange- 
ment with respect to the representation if it fixes no points at all. The proportion 
of derangements of the symmetric group Sym^ acting on m letters is known to 
approach 1/e as m ^ cxj. We give similar results for a Weyl group acting on its re- 
flections by conjugation. We refer to these elements as reflection derangements. We 
are grateful to Anthony Henderson for helping us with the proof of this proposition. 

Proposition 6.3. IfW is an irreducible Coxeter group of classical type Ag, / Ci, 
orD(, then the proportion of its reflection derangements approaches 2e~^/^, e"^/**, 
2e^5/4 ^_ (4e)^i^ respectively, as ^ —> oo. For exceptional types, the proportions are 
as listed below: 

G2 F4 Eg E7 Eg 

1/3 1/4 1409/2592 1646/2835 3385549/6220800 

Proof. Denote by / the number of reflection derangements of W. We wish to 
determine //|M^|. 

Type Ai: The Weyl group W{Ai) can be identified with the symmetric group 
Sym^_,_j on £ -I- 1 letters. Write m — £ + 1 and write dm for the proportion of 
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permutations in Sym„ without fixed points in {!,..., m}. Denote by Rm the set 
of all permutations in Sym^ with at most one fixed point in {1, . . . , to}. 

An element of Sym^ does not fix a reflection if, and only if, it belongs to Rm 
and does not contain a transposition in its cycle decomposition. So 



/ = 



Rm- U Bj^ 

\<i<j<m 



where 



R-m = {w & Rm I w contains («, j)}. 
We compute / by inclusion/exclusion. As i?^ and R^^ intersect trivially for j ^ j' 
we can find / as an alternating sum over /i-tuples of commuting transpositions: 



Lm/2J 



Since, clearly, \Rm\ = dr, 



h=0 

+ mdm-i/m 



\R. 



m-2h\ 



lm/2\ 



f=mi y: 



h=0 



1 



h\ 



(4 



m-2h 



im-2h-l 



)■ 



As lim^^oo dm = 1/e, the required proportion tends to 



/ 



lim 



E 

h=0 



1 2 
We 



e 2 . 



2e-2. 



Types and Cf. The Weyl group W = W{Bt) = W{Ci) can be identified with 

the group of all permutations w of {±1, . . . , if} such that {—i)w = —(iw). Define 
the homomorphism : W ^ Sym^ by iw'^ = \iw\. Then w & W fixes no refiections 
if, and only if, w'^ is a derangement of Sym^ and, for every transposition 
contained in the cycle decomposition of w^, either or is 

contained in the cycle decomposition of w. 

Writing Se for elements of W such that w'^ is a derangement and 

S'/ ={w eSe\w contains -j) or (i, 

we find that 



/= Si- U 5;- 

i<i<j<e 

Again, we can count / by taking alternating sums over /i-tuples of commuting 
transpositions in VK"^. As each transposition in the decomposition of an element 
of w'^ corresponds to two 4-cycles as indicated above, we find an extra factor 2^ 
compared to the case: 



E (-1) 

h>0,2h<e 



2 \be-2h\ 



As \Se\ = 2" 



E (-1) 

h>0,2h<e 



2hJ 2hh\ 



t-2h 



di- 



2h- 
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As linim^oo dm — ^/e and |VF(B^)| = 2^£!, the required proportion tends to 
/ ^ / iV' 1 1 



lim -J— = y^(-4) -^-=e *e ^ = e 



Type D^: The Weyl group W(£)g) is the subgroup of VK(B£) consisting of ah 
elements w such that 11^=1 positive. In cycle notation, this means that w 

has an even number of negative cycles (that is, cycles in which both positive and 
negative numbers occur). 

Define (p : W ^ Sym^ as the restriction of the map for type B^. Then w ^ W 
does not commute with any reflection if, and only if, 

(i) w'^ fixes at most one clement of {1, ■■.,('■} and, for every transposition («, j) 
contained in the cycle decomposition of (piw), the cycle occurring in w is 

-i, -j) or (j, i, -j, -i); or 

(ii) w'^ has exactly two fixed points, say i and j, and the cycle decomposition of 

w contains (i, or -j). 

The number of elements of the type (ii) is clearly (^)de-22^~^{i — 2)!, contributing 
, (D2^-^rf,-,(£-2)! 1 

to the required asymptotic proportion. 

Writing Tt for elements of W such that w'^ fixes at most two elements and 

Tl'^ = {w eTf \w contains or 

we find that the set of elements of type (i) is 

l<i<j<i 

Again, we take alternating sums over /i-tuples of commuting transpositions in (p{W). 

As each transposition in the decomposition of an clement of 4>{w) corresponds to 
two 4-cycles as indicated above, we find the same factor 2'' as for the case: 

h=0 ^ ' 

As \Tt\ = 2^-^i\ {de + de^i), the rcsuh is 

L^/2J . ^^h 

^ (^4) i^i-'^h + di-2h-l) , 

which contributes 

h 



lim = > -- — - = 2e-3e"^ = 2e"3 
h=o ^ ^ 

to the required proportion. Hence, the asymptotic proportion is (4e)~^ + 2e~^l^. 
The exceptional types: These were computed by machine. □ 

Corollary 6.4. The proportion of reflection derangements in a Weyl group is less 
than |. 
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Proof. Recall that if a„ > converges monotonically to zero, then J2^oi~^y^i 
is called an alternating series. The maximum value of the partial sums s„ — 
of such a series is one of the first two partial sums. Since the series 
in the previous proposition are sums of alternating sequences, it is always possible 
to find a constant M such that the maximum value of the partial sums is one of 
si, . . . , sm- It is now easy to show on a case-by-case basis that the proportion of 
reflection derangements in an irreducible Weyl group is at most |. 

If 14^ is a direct product decomposition into s irreducible Weyl groups, then an 
element of is a reflection derangement if and only if each component of w is a 
reflection arrangement, and so their proportion is at most (|) < §■ O 

Together with Proposition 16.11 this shows that the chance of finding a regular 
semisimple element of L corresponding to a reflection nonderangement in the Weyl 
group is at least one third, provided q is large enough. To complete the analysis, we 
need a more precise bound on the probability of finding certain regular semisimple 
elements. 

6.3. Time analysis. We start by looking at the Coxeter class in the Weyl group. 
The Coxeter element is actually a reflection derangement, but this proof is the 
model for our next result. 

Proposition 6.5. Suppose that W is an irreducible Weyl group. If Wc is a Coxeter 
element of W , then 

\m\ - V q"^) \ J h 
where h is the order of Wc . 

Proof. Suppose a is a root and awc™ is a linear combination of a, awc, . . ■ , awc"^~^. 
We prove that m > i/2 on a case-by-case basis: 

Type A^: Identify W with Symg_^^i and consider $ to consist of roots — ej with 
i ^ j. We can take Wc — {1,2, ...,£+ 1) and a — Ci — ej. So awc^ — ei+m — ^j+m 
with the subscripts taken modulo i + \. Hence aWc™ is a linear combination of 
a, . . . , awc"^ iff i -|- m and j + m are both in [i, i -I- m — 1] U [j, j + m — 1] modulo 
£ + 1. By the pigeon hole principle, this can only happen if m > + l)/2. 

Type C^: Identify W with the set of permutations w of {±1, . . . , ±£} such that 
{—i)w ~ —{iw) for i — !,...,£. Consider $ — ^{Cg) to consist of roots ee^ — Sej 
with £, (5 G {±1}, i,j — l,...,£ and ei ^ Sj. We can take 

wc^il,2,... ,£,-1,-2,. ..,-£) 

and a — ee^ — Sej. The same argument used in type now shows that m > £/2. 

Type Be: The permutation action of W(Bf ) on its roots is isomorphic to the action 
of W{Ci) on its roots, so the same argument works. 

Types Dg: Identify W with the elements of W{Ci) such that 0^=1 (*'"^) > ^ ^^'^ 
consider <I> to consist of the roots ee; — Sej with e,S G {±1}, hj — !,...,£ and 
i ^ j. We can take Wc = {1,2, ... ,£—1,— 1,-2, ... ,—£+!){£, —£) and a — eei — Sej. 
Once again m > £/2 if i,j ^ £. If i = £, j ^ £, then aWc™ = (— l)™ee^ — Scj+m 
with the second subscript taken modulo £ — 1, and so m > £ — 1. 

Exceptional types: These are easily checked by computer. 
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A, 


nti(i-^'') 


B^, Ci 




D, 


ae{i,.-i..}(i-^ont2(i-^'^) 


G2 


{1 - X^){1 ~ X^){1 + X) 


F4 


(l-^')n.e{4,6.8}(l-^0 


Eg 


(1 - n,e{1.4,5.6,8}(l - ^0(1 + X' + X') 


Er 


(1 - n.e{l,6,8,10,12,14}(l - X')il + + Xp 


Eg 


nie{l,8,10,12,14,18,20,24}(l ^ + + X^ + X^") 



Table 1. The functions Qw{X) for a Coxeter element w 



It is well known that every orbit of Wc on $ has size h, so J^i Ci{wc) — 2N /h = £. 
We have shown that Ci{wc) = for i < ^/2, so 

2-j qi - qi/2- 

The functions Qw^{X) are straightforward to compute and are given in Tabled 
The terms in which every coefficient is positive can be ignored, since they are 
bounded below by 1 when we set X = 1/q. Since no term 1 — X"" appears more 
than twice in these polynomials and 9 > 3, it follows by Lcmma lfi . 2l that (l/?) > 

(1 - 1/9)"- ... 

The required inequality now follows from the first inequality of Proposition 16. II 

and the fact that the centraliser of Wc has order h. □ 

We now consider reflection nondcrangcmcnts that arc, in some sense, close to 
being Coxeter elements. 

Proposition 6.6. Suppose that W is an irreducible Weyl group of rank greater than 
one. If W is classical with rank at least 7 then there is a reflection nonderangement 
w such that 

\L,ssAk)\ > A _ 3 _ 1 _ 1 + 5 \ A _ 1 
\L{k)\ -\ q q{e-2)/2 J ^ q ) At 

For other Cartan types there is a reflection nonderangement w such that 

■ss.w (fc)i r v-cAA 

\m\ - [ hi') V c 

with the constants c and Ci listed in Table\^ 

Proof. Fix a root (3. Assume /? is short (resp. long) for Cartan type Bg (resp. C^). 
Let = {7 G $ I (7, (3*) = 0}. Then $^3 is a subsystem of W and, except in type 
D4, it has at most two irreducible components. Let be the irreducible summand 
of of maximal rank. Let sp be the reflection in /3 and let be the Coxeter 
element of We take w = spWfj, except for type Ai where we use w = 1, 

type G2 where we use w = sp, and type D4 where we use S1S2S1S3S2S1S4S2S1S3S2. 
(Here Si is the zth simple reflection, with the numbering given in |Bou75j .) These 
elements are all reflection nonderangements. 
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Type 


c 


Cl 


C2 


C3 


C4 


C5 


C6 


C7 


C8 


Ai 


2 


1 
















A2 


2 


1 


2 














B2 


8 


4 

















G2 


4 


3 


4 














A3 


8 


2 


4 















B3 


8 


1 


2 


2 












A4 


6 


1 


2 





2 










B4 


12 


1 


1 


4 













D4 


16 


5 


8 
















T? 
^4 


0^ 

OD 


Q 


i 


b 


u 










A5 


8 


1 


1 


2 


4 











B5 


16 


1 








4 


2 








D5 


16 


3 


5 


2 


4 











As 


10 


1 








4 





2 






Be 


20 


1 








2 


5 









De 


24 


3 


5 


3 


4 












Eg 


36 


3 





3 


2 


6 









E7 


60 


3 








2 


10 










Eg 


108 


3 














4 


9 






Table 2. The constants c and for small rank and exceptional 



First we prove that 



^ 3 4 i + 5 

^ 7 - g ^ ^ ^ g(^-2)/2 



for the classical types of rank at least 7. 

Type A^: Assume /? = ei — 62. Then <i>;5 has type A£_2, and so orbits within 
contribute at most ^^fl2)/2 to the sum, as in the previous proof. If a ^ ^p, then 
a = ±(ei — Cj) where z = 1 or 2 and j > 2. These roots form one orbit of size 2 and 
either two orbits of size ^ — 1 or one orbit of size 2(^—1). So these orbits contribute 
at most l/q + 2/q^. 

Type Bg with /? short: Assume /? = ei — 62- Then <i>^ has type B^-i, and so the 
orbits within $^ contribute at most ^(/~l")/2 ■ If a ^ then a — eci — Sej where 
i = 1 or 2 and j > 2. These roots form four orbits of size two with m = 1 and four 
orbits with m — i ~ 2. 

Type with /3 long: This is similar to type B^, with the short roots and long 
roots exchanged. 

Type D^: Assume /3 = £1 — 62. Then $^ has type T)g-2 Ai and $^ is the subsystem 
of type Df_2- So the orbits within (E>^ contribute at most ^(/ji^/a to the sum. If 
a ^ then a — eci ~ 6ej where i = 1 or 2 and j > 2. These roots form at most 
four orbits with m = £ ~ 2. 



The values of the constants in Table |2 are easily computed in Magma. The 
constant c is just |Ch/(w)|. The functions Qiu{X) are given in Table |3| Applying 
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1-X 


A2 




A3 


{1 - X){1 - X^){1 + X^) 


Af it > 3) 


f+i}\{2.e~i}\ 1 


-B2 5 C2 




B3, C3 


[1 - X){1 - X^){1 - X^) 


B4, C4 


(1 - X)(l - X^){\ - X%\ - X^) 
(l-X)(l-X^-2)(3-(-i)')/2n ^2 o.r, n(l-X20 


Be,Ge {£ > 4) 


D4 


(1-X)2(1+X6)(1+X2)2 


D5 


(1 - Xf{l - - X^){1 + X^){1 + X4) 

(1 - Xf{l - - X^){1 - XlO)(l + X2)2(l + 

(1 - ae{.-3,n(i - n,e{4,...,.-i}\{.-3}(i - ^'')x 


De 


D, {£ > 6) 


G2 


1 -X^ 


F4 


nig{l,3,8,12}(-'^ ~ X') 


Eg 


(l-^)'n.e{5.8,9,12}(l-^^) 


E7 


(1 - n,e{5,6,12,14,18}(l - ^0(1 + + X^) 


Eg 


(1 - X) nie{642, 14,20, 24,30} (1 ~ X^)x 



(1 + X2)(1 + + + 



Table 3. The functions Qw{X) 



Lemma 10 we get (3„(l/(?) > (1 - l/qf- 

For groups not covered in Table 12 let h/j he the Coxeter number of Then 
the centraliser of W/3 in has order hp, and the centraliser of w in has 

order 2hp < A£. The required result now follows from the first inequality of Propo- 
sition O □ 



Finally we are in a position to give an analysis of our algorithm. We refer to Al- 
gorithm^] a version of Algorithm [S] which searches for maximal toral subalgebras 
corresponding to reflection nonderangements. As discussed in Subsection 16. 21 find- 
ing / with deg(/) = 1, or deg(/) — 2 and / = /_ is equivalent to the corresponding 
Weyl group element being a reflection nonderangement. When deg(/) — 2 and 
/ = we have always found in practice that M/Z is of type Ai, and so has 
dimension 3. We do not have a proof of this however, so it is necessary to check 
and then decompose over the field extension k2 in the unlikely event that we get a 
larger subalgebra. 

Theorem 6.7. Suppose that the characteristic of k is greater than 3. Let G be a 
k-split connected reductive group and let L be the Lie algebra of G. We can find a 
split maximal toral subalgebra of L in Las Vegas time 0{n'^£^log'^{i)\og^{q)). 

Proof. Before calling Algorithm 1101 we compute the centre of L, which takes time 
0((n-|-^2^3 \Qg(^q^y Using Algorithm[7| we can assume G is simple. As indicated in 
AlgorithmlTUl the computations within the main loop take time 0(£'' log(^) log^ (<?)). 
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SplitMaximalToralSubalgebra :— function(L, Z) 
repeat 

let H/Z = MAXIMALTORALSUBALGEBRA(i/Z) 0{£^ ^Og{q)) 

if H is split then return H oXf \og{^)) 

let J = GeneralisedRoots(L/Z, Oif log(^) log^((?)) 

if there exists / G 3^ with deg(/) = 1 then 

let MIZ := m^lZ)s + (i/^)/- )) 0(^6 log(g)) 

elif there exists / £ J' with deg(/) = 2 and / = /- then 

let := 0(^«log(<z)) 

if dim(M/Z) ^ 3 then 

find a in <!>/ over hi 0(£log^((7)) 

let MIZ = mi/Z)^ + 0(^' log(<z)) 
end if 

until M is defined 0(^log(^)) times 
let H = SplitMaximalToralSubalgebra(M, 
let C = <j){CL/z{H)) and Z = cj){Z{C/Z)) 
let K = Z 

for Af in Components(C, i/) do 

let K = K + SPLITMAXIMALTORALSUBALGEBRA(Af , Z) 

end for 
return K 
end function 

ALGORITHM 10. Finding a spht maximal toral subalgebra 

By Proposition 1^21 if G is classical with rank at least 7, we obtain a split toral 
subalgebra M with probability at least 



For g > 5 and £ > 7, this is at least 

4y / 3 4 12 \ 1 

Similarly for the Cartan types in Tabled except for D4, 

(.-i:?)(-^n.(-i:|)04r^o. 

For type D4, the bound is negative for q — but positive for q > 7. So it remains to 
consider the Lie algebra 04(5). But for any fixed Lie algebra, it is easily seen that 
there is a nonzero chance of the algorithm working, since there is a chance that the 
toral subalgebra found by Algorithm El is already split. We have now shown that 
there is a constant C > such that the probability of success after one iteration of 
the main loop is at least C/£. 
Since 

lim(l-|^ ---^ 
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we can choose a such that 



1 

1-^ < 



I - e 



4 



for all I. Hence the probability of failure after a(. log(£) repetitions of the loop is at 
most 

a«og(^) / ^ \ log(£) ^ 

1) -\^) "F' 

Clearly the depth of recursion is at most which contributes a further factor 
of I to our timing. The ranks of all the subalgebras in all the calls at a particular 
depth sum to at most £, so the total number of recursive calls is at most P. Hence 
the overall probability of success is at least 

Hence Algorithm EH takes Las Vegas time 0(^^ log^(^) log^(q)). Combining this 
with the preprocessing time of 0{{n + log(g)), and using the fact that n > I 
we get the desired result. □ 

Corollary 6.8. Suppose that the characteristic of k is greater than 3. Let G be a 
k-split connected reductive group and let L he the Lie algebra of G. We can find a 
Chevalley basis of L in Las Vegas time 0(ri'^^^ log^(£) log^(g)). 

Proof. The time taken to find a split maximal toral subalgebra clearly dominates 
the time for Algorithmic] □ 

We can easily decompose G into simple subgroups, since we know its root datum. 
Hence, combining this corollary with Proposition l4.3l we see that the algorithm for 
Lang's Theorem takes Las Vegas time 

0{n^e'^ \og^{i) \og^{q) + n^r^s^ log^(g)), 

which is easily simplified to the expression in Theorem II. 21 
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